OWASP Dependency-Track

Self-hosted platform that analyzes an SBOM to find and track supply-chain risk in software components.

PlatformWebfreeglobal

OWASP Dependency-Track is an open-source, self-hosted platform that continuously checks an application's Software Bill of Materials against known vulnerabilities, giving teams an ongoing view of software supply-chain risk instead of a one-time scan. It's aimed at application security and engineering teams that need to track component risk across their software.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of OWASP Dependency-Track - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim OWASP Dependency-Track to unlock →

Something wrong with this listing — dead link, not a real product, wrong info?

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether OWASP Dependency-Track (or something else) actually fits.

Try a problem